KsepDsEventDriverStartIo
VOID __stdcall KsepDsEventDriverStartIo(_DRIVER_OBJECT *DriverObject, _DEVICE_OBJECT *Fdo, _IRP *Irp){
REGHANDLE v3;
_EVENT_DATA_DESCRIPTOR UserData;
_DEVICE_OBJECT **v5;
int v6;
int v7;
_IRP **v8;
int v9;
int v10;
_DRIVER_OBJECT *v11;
_DEVICE_OBJECT *v12;
_IRP *v13;
v13 = Irp;
v12 = Fdo;
v11 = DriverObject;
v3 = *(&stru_140CF2E80 + 627);
if( *(&stru_140CF2E80 + 627) )
{
if( EtwEventEnabled(*(&stru_140CF2E80 + 627), &KseDsEventStartIo) )
{
UserData.Reserved = 0;
v7 = 0;
v10 = 0;
UserData.Ptr = (unsigned __int64)&v11;
UserData.Size = 8;
v5 = &v12;
v6 = 8;
v8 = &v13;
v9 = 8;
EtwWriteEx(v3, &KseDsEventStartIo, 0i64, 0, 0, 0, 3u, &UserData);
}
}
}Referenced by:
KseDsCallbackHookDriverStartIo